Skip to content
Sign in

Cisco product

IOS XE Software

Alert
No CISA KEV deadline is open. CISA last added an IOS XE Software CVE on 3 Mar 2022.

Tracked since 26 Mar · latest article 26 Mar · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 2 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date2

IOS XE Software CVEs in CISA KEV with their federal deadlines. None is open.

Exploited IOS XE Software CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2018-0174IOS XE Software3 MarPassed 17 Mar–
In CISA KEVCVE-2017-12319IOS XE Software3 MarPassed 24 Mar–
Vendor CSV of 101 entries for CiscoAll 101 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds IOS XE Software CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

No additions in the last eight quarters.

Fix listed

0 of 4 CVEs in coverage

4 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-20113: 30.4th percentileCVE-2026-20114: 28.8th percentileCVE-2026-20112: 15.8th percentileCVE-2026-20110: 2.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-2011330.4
CVE-2026-2011428.8
CVE-2026-2011215.8
CVE-2026-201102.8

Coverage1 article · all time

The latest article naming IOS XE Software, in the shared story grammar.

Full timeline
Quiet for 31 weekslast report 26 Mar1 article1 outlet

1 article from 1 outlet since 26 Mar. Quiet since 26 Mar.

Now26 Mar2627282926 Oct27First reportSecurityWeek · 26 Mar, 12:45
  • Thu 26 Mar, 12:45 UTC. SecurityWeek, first report. Cisco Patches Multiple Vulnerabilities in IOS Software.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 1 articles as a list
  1. Thu 26 MarDay 01
    1. Cisco Patches Multiple Vulnerabilities in IOS Software12:45 · SecurityWeek · First report

All CVEs in coverage4

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-20113

    Cisco IOS XE Software vulnerability

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-20114

    Cisco IOS XE Software vulnerability

    5.4Medium0.3% EPSS · 1 article
  • CVE-2026-20112

    Cisco IOS XE Software vulnerability

    4.8Medium0.3% EPSS · 1 article
  • CVE-2026-20110

    Cisco IOS XE Software vulnerability

    6.5Medium0.1% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in